Regulated organizations running air-gapped AWS workloads need to migrate hundreds of Helm charts and images into private Amazon ECR with consistent security controls.
Attempting to shrink container images to reduce their attack surface reveals the limitations and security gaps of distroless containers.
Cloud-native operations face the phantom slowdown scenario where Grafana or Kubernetes dashboards appear green while users experience poor performance.
Istio security advisory disclosing multiple Envoy CVEs including a remote crash in the OAuth2 HTTP filter with CVSS 7.5 and a Brotli vulnerability.
CNCF graduated project Kyverno, created by Nirmata, is used for enforcing configuration security and best practices, though admission control only answers part of the problem.
Amazon GuardDuty now supports over 50 optional detection rules for Runtime Monitoring to help detect process, file, and network activity signs of compromise.
Kubernetes Jobs submitted to a cluster managed by Kueue can remain suspended and pending without application logs or Pods to inspect.
GitHub has launched a public preview of its package firewall to help prevent malware and credential harvesting during package installation.
Cloudflare is deploying mitigations following the discovery that eight eMudhra intermediate certificates use weak keys.
AWS launched Amazon ECS Gateway, a managed ingress resource that centralizes ALB provisioning and networking policies across ECS clusters.
An overview of moving n8n from single-container SQLite setups to production-ready architectures on Amazon EKS using PostgreSQL and Redis.